Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/_FFdQgcnduq3o5j9mc3SKDs008U.roa
File: _FFdQgcnduq3o5j9mc3SKDs008U.roa (raw, json)
Hash identifier: 3xEcouR0vlYraywNJFDzPJR+QjnyPqV5eE3ZauKN3KA=
Subject key identifier: FC:51:5D:42:07:27:76:EA:B7:A3:98:FD:99:CD:D2:28:3B:34:D3:C5
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CB7FA35
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/_FFdQgcnduq3o5j9mc3SKDs008U.roa
Signing time: Sat 01 Jan 2022 04:59:45 +0000
ROA not before: Sat 01 Jan 2022 04:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205074
IP address blocks: 212.91.16.0/24 maxlen: 24
212.91.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750254645 (0x2cb7fa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc515d42072776eab7a398fd99cdd2283b34d3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:72:40:1d:48:45:df:06:20:e4:4c:08:87:
26:72:19:be:78:7b:a3:46:1e:80:2f:72:48:8f:a2:
58:3f:6c:2d:4c:89:e2:c6:19:8e:7c:28:8c:95:e8:
49:41:c7:32:4c:dc:05:3b:e3:3d:d6:17:72:7b:03:
bf:fc:78:a0:ba:9d:b8:8e:75:b1:f1:3d:8e:43:44:
97:d0:28:d4:33:c0:79:9f:e7:19:6d:e9:eb:7d:b1:
1f:98:29:67:86:32:86:92:a7:f2:90:a6:ff:b1:cb:
c0:18:04:dd:84:bf:8c:73:f8:44:60:f0:a2:33:0e:
5c:de:41:5e:8a:61:21:21:8a:95:4c:45:33:c3:43:
0f:67:ac:49:e5:e2:d6:51:32:fb:a7:9b:75:8f:38:
7d:b6:4d:a9:ef:bf:dc:4c:a8:df:db:54:d2:35:f4:
b8:b2:fc:14:09:cb:1d:79:41:31:cf:73:09:c8:97:
b2:30:52:2d:d1:9c:c6:34:93:b4:cd:ba:fc:78:b2:
4e:67:6a:a7:5a:a9:16:e5:9f:28:35:80:4d:69:f9:
e0:da:ea:b8:35:2d:8b:74:b1:5f:23:68:cf:30:e4:
3b:64:26:3a:d6:9c:31:30:64:22:77:83:3b:81:71:
7a:44:47:b3:f4:e3:96:e2:3a:3d:11:f9:09:6d:1e:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:51:5D:42:07:27:76:EA:B7:A3:98:FD:99:CD:D2:28:3B:34:D3:C5
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/_FFdQgcnduq3o5j9mc3SKDs008U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.16.0/23
Signature Algorithm: sha256WithRSAEncryption
39:72:9a:2e:18:c2:71:c5:4a:18:2c:3c:57:f7:6f:e3:3f:24:
d0:45:36:c6:83:8d:56:98:05:e5:64:77:a6:7b:17:b1:63:a8:
27:69:e5:60:f0:f9:81:39:cd:a9:98:c0:71:db:2f:d3:43:cb:
ef:4e:d2:a6:52:a0:d9:fe:98:92:83:8b:20:8a:cb:42:09:2c:
d1:98:d7:13:b5:5a:2a:91:41:9d:a1:11:b2:2f:13:3c:12:cd:
e6:e8:f2:32:d5:70:76:8a:9c:3c:0e:83:84:9f:f4:ec:fb:bb:
03:9c:c6:6d:01:99:ee:31:17:73:ce:f8:07:30:d3:28:b6:3e:
22:57:0a:c9:56:ea:38:f5:22:30:a5:3e:0c:70:93:9d:d9:3b:
93:6e:2f:eb:2e:16:42:7b:58:fa:26:64:62:a9:77:ae:95:48:
fa:75:88:2d:a9:97:7b:cf:a5:f2:e2:a5:b9:f4:a5:eb:4f:42:
96:e8:2b:b4:9e:df:e5:a2:d4:29:98:8e:da:20:5e:37:76:9d:
88:4c:7a:5d:fb:81:d7:b7:fd:60:67:b8:15:28:43:20:88:df:
3d:d2:85:0b:f6:77:af:a2:36:2b:32:f0:e9:07:60:a9:a1:b3:
5b:21:89:7d:cd:1d:55:19:7f:55:65:6d:0e:96:96:87:82:7f:
90:fd:e7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org